summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-12-16add daap (Digital Audio Access Protocol). ok deraadt@Jakob Schlyter
2003-12-16add afpovertcp. ok deraadt@Jakob Schlyter
2003-12-16expand documentation of built-ins:Jason McIntyre
group them according to POSIX - arithmetic, string, I/O, general and better document how they work. use section headers for more logical navigation. ok jose@
2003-12-16- s/recieve/receiveJason McIntyre
- kill whitespace at EOL
2003-12-16pfsync.4:Jason McIntyre
- new sentence, new line - kill whitespace at EOL - escape a dot at EOL pflog.4: - subject verb agreement
2003-12-16Compute openings value, out of boot-time count of devices.Niklas Hallqvist
Add reentrancy check of gdt_exec_ccb. The latter change changes timing enough to not trigger a timing bug on really fast machines too often. A real fix is being worked on.
2003-12-16Compute openings value, out of boot-time count of devices.Niklas Hallqvist
Add reentrancy check of gdt_exec_ccb. The latter change changes timing enough to not trigger a timing bug on really fast machines too often. A real fix is being worked on.
2003-12-16Test src.track timeout.Ryan Thomas McBride
2003-12-16BecuaseTheo de Raadt
2003-12-16Don't do all the heavy pfsync processing if there are no bpf listenersRyan Thomas McBride
and no network synchronization is happening.
2003-12-16clean the cpu types and syncMichael Shalayeff
2003-12-16only map the rom and do not touch the hpa space getting rid of memsize ↵Michael Shalayeff
define that was not really true; plus tested by otto@ and miod@
2003-12-16Test source-tracking syntax.Ryan Thomas McBride
2003-12-16Clean up first paragraph.Ryan Thomas McBride
2003-12-16Reorg and better english. Split network synchronisation specificsRyan Thomas McBride
into it's own section.
2003-12-16Pass gcc -Wsign-compare; ok grange@Todd C. Miller
2003-12-16Document new pfsync options (syncif, -syncif and maxupd).Ryan Thomas McBride
ok deraadt@
2003-12-161st pass at documenting the new pfsync network synchronisationRyan Thomas McBride
functionality. ok deraadt@
2003-12-16shrink error strings a lot; ok millertTheo de Raadt
2003-12-16Remove unused strings; we print out info from pcmciadevs duringTodd C. Miller
device attachment so we don't need extra ones. OK mickey@ deraadt@
2003-12-16shorten terminal baud rate change stringsTheo de Raadt
2003-12-16Check that max-src-states and max-src-nodes are not being set to 0.Ryan Thomas McBride
2003-12-16becuaseTheo de Raadt
2003-12-16typo; mjc@bitz.caTheo de Raadt
2003-12-16Test setting hostid.Ryan Thomas McBride
2003-12-16hostid is stored in network byte order, print in host byte order.Ryan Thomas McBride
2003-12-16Test failure of attempt to set hostid to 0.Ryan Thomas McBride
2003-12-15Set devclass to DV_IFNET for all USB network drivers.Cedric Berger
ok deraadt@ nate@
2003-12-15jot.1:Jason McIntyre
- use .Bk/.Ek for SYNOPSIS - sort options - better -width for options list - reword examples to make them clearer - fix broken example, as reported by Takanori Isihara jot.c: - sync usage() with SYNOPSIS
2003-12-15syncTheo de Raadt
2003-12-15more shrinkTheo de Raadt
2003-12-15Fix some sign issues that fell out from the change of rlim_t to unsigned.Todd C. Miller
Also add a check for a negative result when subtracting microtime(&now) from runtime and simply treat this as zero. This should *not* happen but due to an apparent bug in microtime on dual clock machines, it does. The microtime bug is currently being examined. Based on a diff from miod@ with help from otto@; ok deraadt@ otto@
2003-12-15sc_sp is a #define on some architectures, use a different nameTheo de Raadt
2003-12-15Test for <port_a>:<port_b> syntax outside of rdr.Ryan Thomas McBride
2003-12-15Support for groups modp2048, modp3072, modp4096, modp6144 and modp8192 (IDs 14Hans-Joerg Hoexer
to 18). ok ho@
2003-12-15KNF here tooHenning Brauer
2003-12-15ryan left a few for me ;-)Henning Brauer
2003-12-15workaround a clock tick handling bug that the rlimit code just exposed.Theo de Raadt
2003-12-15Whitespace.Ryan Thomas McBride
2003-12-15Fix whitespace screwups before henning wakes up.Ryan Thomas McBride
2003-12-15Add pfsync.Ryan Thomas McBride
ok deraadt@
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@
2003-12-15syncTheo de Raadt
2003-12-15Regression test for PR 2450.Otto Moerbeek
2003-12-15Unbreak parameter assignment when calling bourne style functions;Otto Moerbeek
resolves PR 2450. ok deraadt@ millert@
2003-12-15- end sentence with full stop, not commaJason McIntyre
- kill whitespace at EOL
2003-12-15- kill whitespace at EOLJason McIntyre
- new sentence, new line - kill blank line - missing .El - missing escape - ip -> IP - greate -> create
2003-12-15syncTheo de Raadt
2003-12-15shorten names a lotTheo de Raadt
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
to: - Ensure that clients get a consistent IP mapping with load-balanced translation/routing rules - Limit the number of simultaneous connections a client can make - Limit the number of clients which can connect through a rule ok dhartmei@ deraadt@